Disable an AccessKey pair for a RAM user - Resource Access Management

You can disable an AccessKey pair for a Resource Access Management (RAM) user to temporarily revoke their programmatic access to Alibaba Cloud resources. This action is useful if a user's role has changed or if you need to investigate a potential security incident without permanently deleting the key.

Background information

Warning

When you disable an AccessKey pair, it can no longer be used to make API calls. If the key is in use by an application, the application will fail. Proceed with caution.

Procedure

Log on to the RAM console as a RAM administrator.
In the left-side navigation pane, choose Identities > Users.
On the Users page, click the username of the target RAM user.
On the user details page, click the Authentication tab. In the AccessKey section, find the target AccessKey pair and click Disable in the Actions column.

Note
To re-enable the AccessKey pair, click Enable in the Actions column.
In the Disable confirmation dialog box, click Disable.